{
  config,
  lib,
  ...
}: {
  services.fail2ban = {
    enable = true;
    maxretry = 3;
    bantime-increment = {
      enable = true;
      formula = "ban.Time * math.exp(float(ban.Count+1)*banFactor)/math.exp(1*banFactor)";
      # multipliers = "1 2 4 8 16 32 64";
      maxtime = "336h";
      overalljails = true;
    };
  };
}